1. Purpose and Scope
This policy has been prepared to provide information about the principles of privacy, account security, transaction security and general information security in the use of the website operated by ANATOLİ TASARIM DEKORASYON HEDİYELİK EŞYA SAN. TİC. A.Ş.
This text should be considered together with the Personal Data Protection (KVKK) Notice, the Cookie Policy, the Distance Sales Agreement and the other legal texts. This text does not replace the disclosure obligation under the Turkish Personal Data Protection Law (KVKK); rather, it explains our general approach to security.
2. Principle of Privacy
Our Company attaches importance to the confidentiality of information belonging to its users. Personal data shared through our website is processed only in accordance with the applicable legislation, contractual obligations and legitimate business needs. We strive to protect personal data against the risks of unauthorized access, unlawful processing, disclosure, loss, alteration or destruction. Data controllers are obliged to take appropriate technical and administrative measures to ensure the security of personal data.
3. Account and User Security
If you have a user account, you are responsible for the accuracy of your account information and the confidentiality of your login credentials. It is recommended that you choose a strong password, do not share it with third parties, and contact us immediately if you notice any unusual activity in your account.
Our Company endeavors to apply reasonable security measures to prevent unauthorized access to your account; however, it cannot be guaranteed that risks arising from user-related security weaknesses will be completely eliminated.
4. Payment Security
Payment transactions made through our website may be carried out via authorized payment institutions and the relevant banking systems, depending on the payment infrastructure used. The structure of the payment infrastructure may be decisive with regard to the processing, storage and security of your card details.
Our Company may not have actual control over payment card data that it does not store on its own systems. For this reason, it is recommended that you also review the security and privacy terms of the infrastructure provider used at the payment step.
5. Technical and Administrative Security Measures
Our Company applies various measures to ensure information security according to need and technical capability. Examples of these measures may include:
* access authorization and role-based access controls
* keeping user and transaction logs
* firewall, antivirus and malware protection
* software and system updates
* data backup and recovery planning
* encryption, secure connection protocols and password policies
* confidentiality / security obligations for employees and service providers
Pursuant to Article 12 of the KVKK, the data controller must take appropriate technical and administrative measures to prevent unlawful access to and processing of personal data.
6. Transaction Security and Log Records
On the website and connected systems, transaction security records such as IP address, access time, transaction records, device/browser information and similar data may be kept for the purposes of security, continuity, error detection, prevention of misuse and fulfillment of legal obligations.
These records may be used for the investigation of security incidents, the evaluation of system performance and in cases where information must be provided to competent authorities. Transaction security data must be processed in a manner that is appropriate, limited and proportionate to its purpose.
7. Third-Party Services and Links
Our website may operate in integration with third-party systems for payment, shipping, analytics, advertising, social media, maps, live support or similar services. In addition, the site may contain links redirecting to third-party websites.
Our Company may not have direct control over the privacy, cookie and security practices of these third parties. For this reason, users are advised to separately review the policies and terms of the relevant service providers or third-party sites.
8. User Responsibility
Users are obliged to:
* protect their account information,
* share accurate and up-to-date information,
* refrain from sharing content that would violate the rights of third parties,
* refrain from attempts to circumvent the technical security measures on the site,
* be vigilant against phishing, fake links and fraud attempts.
Caution should be exercised regarding suspicious emails sent using the Company's name, fake payment links or unverified messages; in case of doubt, confirmation should be obtained directly through our official communication channels.
9. Data Breach and Incident Management
If an incident that may affect personal data or system security is detected, the necessary technical and administrative assessments are carried out according to the nature of the incident, and corrective and preventive actions are implemented where necessary. If a personal data breach is involved, the necessary notification processes are evaluated within the framework of the applicable legislation.
10. Policy Updates
This policy may be updated in line with legislative changes, technical developments and operational needs. The current version becomes effective as of the date it is published on our website.
11. Contact
For questions about this policy, you can contact us through the following channels:
Company Title: ANATOLİ TASARIM DEKORASYON HEDİYELİK EŞYA SAN. TİC. A.Ş.
Address: Levazım Mah. Vadi Cad. Zorlu Center No:2/154 Beşiktaş / İstanbul / Türkiye
E-mail: info@anatolihome.com
Phone: +90 (212) 320 82 04 / 05
